fix: disallow anonymous links when enabled for v1 api

Resolves #553

1 files changed, 2 insertions, 1 deletions

diff --git a/server/__v1/index.ts b/server/__v1/index.ts
index 087c6fe..90f7629 100644
--- a/server/__v1/index.ts
+++ b/server/__v1/index.ts
@@ -8,6 +8,7 @@ import {
 } from "./controllers/validateBodyController";
 import * as auth from "../handlers/auth";
 import * as link from "./controllers/linkController";
+import env from "../env";
 
 const router = Router();
 
@@ -16,7 +17,7 @@ router.post(
   "/url/submit",
   cors(),
   asyncHandler(auth.apikey),
-  asyncHandler(auth.jwtLoose),
+  asyncHandler(env.DISALLOW_ANONYMOUS_LINKS ? auth.jwt : auth.jwtLoose),
   asyncHandler(auth.recaptcha),
   asyncHandler(validateUrl),
   asyncHandler(ipCooldownCheck),